ci-upstream-kasan-gce-smack-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce-smack-root/syz-executor1325808465 <...> Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-gce-smack-root/syz-executor1325808465", ["ci-upstream-kasan-gce-smack-root/syz-executor1325808465"], 0x7fffce5827c0 /* 10 vars */) = 0 brk(NULL) = 0x55559437b000 brk(0x55559437bd80) = 0x55559437bd80 arch_prctl(ARCH_SET_FS, 0x55559437b400) = 0 set_tid_address(0x55559437b6d0) = 5601 set_robust_list(0x55559437b6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce-smack-root/syz-executor1325808465", 4096) = 61 getrandom("\x6b\x4e\x31\x1c\xd2\x79\x61\x4f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55559437bd80 brk(0x55559439cd80) = 0x55559439cd80 brk(0x55559439d000) = 0x55559439d000 mprotect(0x7f06f082c000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce-smack-root/strace-static-x86_64: Process 5602 attached , child_tidptr=0x55559437b6d0) = 5602 [pid 5601] rt_sigprocmask(SIG_SETMASK, [] [pid 5602] set_robust_list(0x55559437b6e0, 24 [pid 5601] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5602] <... set_robust_list resumed>) = 0 [pid 5602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5602] setpgid(0, 0) = 0 [pid 5602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5602] write(3, "1000", 4) = 4 [pid 5602] close(3) = 0 executing program [pid 5602] write(1, "executing program\n", 18) = 18 [pid 5602] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5602] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdf689bb30) = 18 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [ 80.396591][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdf689bb30) = 18 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdf689bb30) = 9 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdf689bb30) = 27 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdf689bb30) = 4 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdf689bb30) = 8 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdf689bb30) = 8 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdf689bb30) = 8 [ 80.560439][ T9] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 80.594220][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5602] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f06f0832b4c) = -1 EINVAL (Invalid argument) [pid 5602] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdf689bb30) = 0 [ 80.636367][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.636395][ T9] usb 1-1: Product: syz [ 80.636408][ T9] usb 1-1: Manufacturer: syz [ 80.636421][ T9] usb 1-1: SerialNumber: syz [ 80.649703][ T9] usb 1-1: config 0 descriptor?? [ 80.703161][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 80.703183][ T9] em28xx 1-1:0.0: Video interface 0 found: [pid 5602] exit_group(0) = ? [pid 5602] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5602, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce-smack-root/strace-static-x86_64: Process 5605 attached , child_tidptr=0x55559437b6d0) = 5605 [pid 5605] set_robust_list(0x55559437b6e0, 24 [pid 5601] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] <... set_robust_list resumed>) = 0 [pid 5601] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5605] setpgid(0, 0) = 0 [pid 5605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5605] write(3, "1000", 4) = 4 [pid 5605] close(3) = 0 executing program [pid 5605] write(1, "executing program\n", 18) = 18 [pid 5605] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5605] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffdf689cb40) = 0 [pid 5605] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5605] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdf689cb40) = 0 [ 80.978229][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 81.089611][ T9] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 81.089647][ T9] em28xx 1-1:0.0: board has no eeprom [ 81.146379][ T9] em28xx 1-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 81.146422][ T9] em28xx 1-1:0.0: analog set to bulk mode. [ 81.148293][ T2257] em28xx 1-1:0.0: Registering V4L2 extension [ 81.173349][ T9] usb 1-1: USB disconnect, device number 2 [ 81.181814][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 81.237493][ T2257] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 81.273793][ T2257] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 81.308782][ T2257] DVB: Unable to find symbol xc2028_attach() [ 81.308815][ T2257] tuner: 1-0061: T ** replaying previous printk message ** [ 81.308815][ T2257] tuner: 1-0061: Tuner has no way to set tv freq [ 81.308827][ T2257] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 81.308843][ T2257] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 81.308850][ T2257] em28xx 1-1:0.0: No AC97 audio processor [ 81.308971][ T2257] tuner: 1-0061: Tuner has no way to set tv freq [ 81.315902][ T2257] videodev: could not get a free minor [ 81.315914][ T2257] em28xx 1-1:0.0: can't register radio device [ 81.315923][ T2257] em28xx 1-1:0.0: V4L2 device video103 deregistered [ 81.325617][ T2257] INFO: trying to register non-static key. [ 81.385787][ T2257] The code is fine but needs lockdep annotation, or maybe [ 81.392894][ T2257] you didn't initialize this object before use? [ 81.399110][ T2257] turning off the locking correctness validator. [ 81.405450][ T2257] CPU: 0 UID: 0 PID: 2257 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 81.415333][ T2257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.425380][ T2257] Workqueue: events request_module_async [ 81.431051][ T2257] Call Trace: [ 81.434318][ T2257] [ 81.437234][ T2257] dump_stack_lvl+0xe8/0x150 [ 81.441844][ T2257] assign_lock_key+0x133/0x150 [ 81.446620][ T2257] register_lock_class+0xcc/0x2e0 [ 81.451634][ T2257] __lock_acquire+0x10c/0x2de0 [ 81.456390][ T2257] ? ret_from_fork_asm+0x1a/0x30 [ 81.461310][ T2257] ? stack_trace_save+0xa9/0x100 [ 81.466240][ T2257] ? __pfx_stack_trace_save+0x10/0x10 [ 81.471608][ T2257] lock_acquire+0x115/0x350 [ 81.476099][ T2257] ? __wake_up_common_lock+0x2f/0x1f0 [ 81.481459][ T2257] rt_spin_lock+0x83/0x400 [ 81.485875][ T2257] ? __wake_up_common_lock+0x2f/0x1f0 [ 81.491237][ T2257] ? __pfx_rt_spin_lock+0x10/0x10 [ 81.496261][ T2257] __wake_up_common_lock+0x2f/0x1f0 [ 81.501452][ T2257] __vb2_queue_cancel+0x2de/0xdc0 [ 81.506470][ T2257] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 81.512270][ T2257] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 81.517627][ T2257] vb2_core_queue_release+0x2f/0x150 [ 81.522898][ T2257] vb2_video_unregister_device+0x15b/0x200 [ 81.528700][ T2257] em28xx_v4l2_init+0x1c60/0x3140 [ 81.533718][ T2257] em28xx_init_extension+0x120/0x1d0 [ 81.538991][ T2257] ? process_scheduled_works+0x97a/0x1630 [ 81.544784][ T2257] process_scheduled_works+0xc3d/0x1630 [ 81.550366][ T2257] ? __pfx_process_scheduled_works+0x10/0x10 [ 81.556364][ T2257] ? assign_work+0x3cf/0x5d0 [ 81.560948][ T2257] worker_thread+0xa47/0xfb0 [ 81.565530][ T2257] ? __kthread_parkme+0x71/0x1f0 [ 81.570561][ T2257] kthread+0x38b/0x470 [ 81.574620][ T2257] ? __pfx_worker_thread+0x10/0x10 [ 81.579719][ T2257] ? __pfx_kthread+0x10/0x10 [ 81.584301][ T2257] ret_from_fork+0x514/0xb70 [ 81.588911][ T2257] ? __pfx_ret_from_fork+0x10/0x10 [ 81.594011][ T2257] ? __switch_to+0xc89/0x1420 [ 81.598684][ T2257] ? __pfx_kthread+0x10/0x10 [ 81.603285][ T2257] ret_from_fork_asm+0x1a/0x30 [ 81.608085][ T2257] [ 81.613191][ T2257] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 81.625097][ T2257] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 81.633505][ T2257] CPU: 0 UID: 0 PID: 2257 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 81.643399][ T2257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.653445][ T2257] Workqueue: events request_module_async [ 81.659079][ T2257] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 81.665051][ T2257] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 ac 5f 94 00 48 ba 00 00 00 00 00 fc [ 81.684641][ T2257] RSP: 0018:ffffc90007487888 EFLAGS: 00010246 [ 81.690700][ T2257] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff9aafb501 [ 81.698656][ T2257] RDX: dffffc0000000000 RSI: ffffffff8bcc6a60 RDI: 00000000ffffffff [ 81.706612][ T2257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.714569][ T2257] R10: dffffc0000000000 R11: fffffbfff2164790 R12: ffff88803df15b14 [ 81.722532][ T2257] R13: ffff88803df15c28 R14: 0000000000000000 R15: 0000000000000000 [ 81.730499][ T2257] FS: 0000000000000000(0000) GS:ffff8881249b9000(0000) knlGS:0000000000000000 [ 81.739427][ T2257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.746014][ T2257] CR2: 000055bf7c0405d0 CR3: 000000000efb0000 CR4: 00000000003526f0 [ 81.753983][ T2257] Call Trace: [ 81.757261][ T2257] [ 81.760181][ T2257] __vb2_queue_cancel+0x2de/0xdc0 [ 81.765205][ T2257] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 81.771030][ T2257] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 81.776397][ T2257] vb2_core_queue_release+0x2f/0x150 [ 81.781672][ T2257] vb2_video_unregister_device+0x15b/0x200 [ 81.787464][ T2257] em28xx_v4l2_init+0x1c60/0x3140 [ 81.792484][ T2257] em28xx_init_extension+0x120/0x1d0 [ 81.797759][ T2257] ? process_scheduled_works+0x97a/0x1630 [ 81.803479][ T2257] process_scheduled_works+0xc3d/0x1630 [ 81.809033][ T2257] ? __pfx_process_scheduled_works+0x10/0x10 [ 81.815016][ T2257] ? assign_work+0x3cf/0x5d0 [ 81.819628][ T2257] worker_thread+0xa47/0xfb0 [ 81.824241][ T2257] ? __kthread_parkme+0x71/0x1f0 [ 81.829195][ T2257] kthread+0x38b/0x470 [ 81.833268][ T2257] ? __pfx_worker_thread+0x10/0x10 [ 81.838378][ T2257] ? __pfx_kthread+0x10/0x10 [ 81.842961][ T2257] ret_from_fork+0x514/0xb70 [ 81.847549][ T2257] ? __pfx_ret_from_fork+0x10/0x10 [ 81.852661][ T2257] ? __switch_to+0xc89/0x1420 [ 81.857340][ T2257] ? __pfx_kthread+0x10/0x10 [ 81.861920][ T2257] ret_from_fork_asm+0x1a/0x30 [ 81.866682][ T2257] [ 81.869727][ T2257] Modules linked in: [ 81.873735][ T2257] ---[ end trace 0000000000000000 ]--- [ 81.886239][ T2257] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 81.886275][ T2257] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 ac 5f 94 00 48 ba 00 00 00 00 00 fc [ 81.886289][ T2257] RSP: 0018:ffffc90007487888 EFLAGS: 00010246 [ 81.886306][ T2257] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff9aafb501 [ 81.886319][ T2257] RDX: dffffc0000000000 RSI: ffffffff8bcc6a60 RDI: 00000000ffffffff [ 81.886331][ T2257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.886337][ T2257] R10: dffffc0000000000 R11: fffffbfff2164790 R12: ffff88803df15b14 [ 81.886345][ T2257] R13: ffff88803df15c28 R14: 0000000000000000 R15: 0000000000000000 [ 81.886351][ T2257] FS: 0000000000000000(0000) GS:ffff8881249b9000(0000) knlGS:0000000000000000 [ 81.886360][ T2257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.886366][ T2257] CR2: 000055bf7c0405d0 CR3: 000000000efb0000 CR4: 00000000003526f0 [ 81.886379][ T2257] Kernel panic - not syncing: Fatal exception [ 81.987868][ T2257] Kernel Offset: disabled [ 81.992198][ T2257] Rebooting in 86400 seconds..